디렉토리 구조 및 각 서비스 추가
This commit is contained in:
31
helm/openebs/charts/nfs-provisioner/templates/psp.yaml
Normal file
31
helm/openebs/charts/nfs-provisioner/templates/psp.yaml
Normal file
@@ -0,0 +1,31 @@
|
||||
{{- if .Values.rbac.pspEnabled }}
|
||||
apiVersion: policy/v1beta1
|
||||
kind: PodSecurityPolicy
|
||||
metadata:
|
||||
name: {{ template "nfsProvisioner.fullname" . }}-psp
|
||||
{{- with .Values.nfsProvisioner.annotations }}
|
||||
annotations: {{ toYaml . | nindent 4 }}
|
||||
{{- end }}
|
||||
labels:
|
||||
{{- include "nfsProvisioner.labels" . | nindent 4 }}
|
||||
spec:
|
||||
privileged: {{ .Values.nfsProvisioner.privileged }}
|
||||
allowPrivilegeEscalation: true
|
||||
allowedCapabilities: ['*']
|
||||
volumes: ['*']
|
||||
hostNetwork: true
|
||||
hostPorts:
|
||||
- min: 0
|
||||
max: 65535
|
||||
hostIPC: true
|
||||
hostPID: true
|
||||
runAsUser:
|
||||
rule: 'RunAsAny'
|
||||
seLinux:
|
||||
rule: 'RunAsAny'
|
||||
supplementalGroups:
|
||||
rule: 'RunAsAny'
|
||||
fsGroup:
|
||||
rule: 'RunAsAny'
|
||||
{{- end }}
|
||||
|
||||
Reference in New Issue
Block a user